Immediate actions (first 48 hours)

  • Read the notice carefully and keep the envelope. The IRS sends identity-theft notices by mail; fraudsters often use scams that mimic IRS language. Verify the notice by visiting the IRS Identity Theft Central page rather than responding to unsolicited calls or emails. (IRS: https://www.irs.gov/identity-theft-central)
  • Follow the instructions on the notice exactly. If the letter asks you to complete Form 14039, Identity Theft Affidavit, complete and return it as instructed. Do not ignore deadlines that appear on the notice. (Form 14039: https://www.irs.gov/forms-pubs/about-form-14039)
  • Do not call numbers in suspicious emails or texts. Use the contact information printed on the IRS notice or check the official IRS website.

Document and gather evidence

  • Make a file (digital and/or physical) with the notice, copies of your tax return, government ID (driver’s license or passport), Social Security card, and any correspondence you send or receive.
  • Get a tax transcript or copy of the disputed return from the IRS transcript tool to compare what the IRS received with what you filed.
  • If someone filed a return using your Social Security number, file an identity-theft report at IdentityTheft.gov and follow the recovery plan you receive. That report helps when dealing with credit bureaus and law enforcement. (FTC: https://www.identitytheft.gov/)

Key forms and protections to use

  • Form 14039 (Identity Theft Affidavit): Use this when the IRS instructs you to report tax-related identity theft. Include the documents requested on the form and follow mailing instructions on the notice.
  • IP PIN (Identity Protection PIN): Request an IRS IP PIN to prevent others from filing a return with your SSN. Apply through the IRS Get an IP PIN tool if you’re eligible. (IRS IP PIN: https://www.irs.gov/identity-theft-fraud-scams/get-an-identity-protection-pin)
  • Credit freeze or fraud alert: Contact one of the three major credit bureaus (Experian, Equifax, TransUnion) to place a fraud alert or freeze. An extended fraud alert or freeze limits new credit accounts and can protect a tax filing-related identity theft victim. For steps and rights, see the Consumer Financial Protection Bureau guidance. (CFPB: https://www.consumerfinance.gov/consumer-tools/identity-theft/)

How to respond to common IRS identity-theft notices

  • CP01H and similar identity verification letters: Usually ask you to confirm identity and may request Form 14039. Respond per the notice and provide copies of requested documents.
  • CP2000 (unreported income): If the notice results from a fraudulent return filed in your name, document the fraud, submit Form 14039 if requested, and include proof of your correct income.
  • Notices showing multiple returns filed: Report the fraud immediately using Form 14039 and the IdentityTheft.gov report; request IRS assistance to block fraudulent returns.

When to involve other agencies and professionals

  • File a police report if the fraud has led to financial loss or clear criminal activity. Keep a copy for the IRS and credit bureaus.
  • Report the theft to IdentityTheft.gov to create an official recovery plan and an Identity Theft Affidavit you can use with credit bureaus.
  • Consider consulting a tax professional or an enrolled agent experienced with identity-theft cases, especially if you receive multiple IRS notices or a CP2000 with tax due.

Monitoring and follow-up (ongoing)

  • Check your IRS account online for flags and status updates. Keep copies of any IRS case or incident numbers and the names of IRS representatives you speak with.
  • Pull your credit reports at AnnualCreditReport.com and review them for new accounts or inquiries. Place or maintain a credit freeze or fraud alert as needed.
  • Continue to monitor for suspicious tax activity each filing season and keep records for at least three years.

Common mistakes to avoid

  • Waiting to respond. Delays can allow the IRS to assess additional balances or penalties.
  • Sending originals. Send copies of IDs and tax returns unless the notice specifically requests originals.
  • Responding to unofficial contact. The IRS will generally contact you by mail; don’t provide personal information to callers or emails that claim to be the IRS.

Related guidance and further reading

Professional note and disclaimer

In my experience helping clients with tax-related identity theft, prompt documentation and use of Form 14039 combined with an IP PIN and credit protections typically shorten resolution times. This article is educational and not a substitute for personalized tax advice. If you face complex notices or potential tax liability, consult a CPA, enrolled agent, or tax attorney.

Authoritative sources